Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ce8d6543-1dd7-4634-81ed-0437244b2b11.roa
File:                     ce8d6543-1dd7-4634-81ed-0437244b2b11.roa (raw, json)
Hash identifier:          iC+FdRUI+enTSqRyeE4jM4Qa75AXKOqA2UeouVK+7Sc=
Subject key identifier:   5E:F4:85:53:0F:78:1E:84:F8:BF:4D:08:05:91:F1:E1:4C:04:5D:A0
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       355CD8F4A4FDD0E258E4C718B5314FF96C280179
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ce8d6543-1dd7-4634-81ed-0437244b2b11.roa
Signing time:             Sat 27 May 2023 00:00:00 +0000
ROA not before:           Sat 27 May 2023 00:00:00 +0000
ROA not after:            Tue 30 May 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5c:d8:f4:a4:fd:d0:e2:58:e4:c7:18:b5:31:4f:f9:6c:28:01:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: May 27 00:00:00 2023 GMT
            Not After : May 30 23:59:59 2023 GMT
        Subject: serialNumber=bf16918d16edc6bb37823780cdde483165df85cb2334b6b0ec86386cf5703fe2, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:31:2d:4d:77:0a:2e:61:e2:f7:24:9f:bf:
                    bf:c1:da:f3:e4:90:2a:d7:bb:79:ab:ff:27:d5:81:
                    84:a5:d9:eb:23:0b:b5:7d:40:77:d9:47:4d:f9:3c:
                    25:ca:94:22:9b:48:3f:56:25:ac:b4:35:62:4e:28:
                    bf:b7:64:29:64:db:8a:c2:84:57:4e:c5:c8:15:50:
                    67:6b:f7:b1:a1:0e:90:61:35:6e:28:d9:f7:e0:bf:
                    ca:2a:98:87:34:01:d8:a7:04:fc:60:36:79:bb:e1:
                    ca:9c:d2:02:67:54:ce:f9:2e:da:67:52:82:d0:d9:
                    21:02:87:fc:5b:3f:d0:4c:63:91:b3:28:1c:77:c0:
                    49:54:52:b5:dd:07:72:0b:50:dc:8a:20:76:27:32:
                    51:27:fa:9a:b4:05:dc:c0:7e:bd:6d:81:b7:75:e4:
                    72:43:80:a7:bd:44:91:30:77:eb:53:6b:ef:e4:88:
                    71:74:69:f7:56:0d:13:a3:13:1b:82:76:4e:f5:a3:
                    69:e5:28:94:1d:2d:f8:de:91:3e:b3:f9:f2:3b:44:
                    ae:01:55:0b:53:82:b0:c0:f8:6d:b6:24:d7:9f:d4:
                    b5:58:ed:63:13:8f:81:37:3b:b1:f9:e4:32:9e:3d:
                    a3:ea:8b:92:15:35:45:2b:d3:0c:23:29:82:56:a8:
                    b4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F4:85:53:0F:78:1E:84:F8:BF:4D:08:05:91:F1:E1:4C:04:5D:A0
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ce8d6543-1dd7-4634-81ed-0437244b2b11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:a4:2d:5f:cb:d0:91:92:7f:f1:41:79:e1:fe:26:04:7c:fc:
         10:d9:5e:d8:f1:c7:fb:38:82:3b:d9:7f:35:21:20:d7:bd:e5:
         ec:b5:c0:0b:52:7f:af:f8:ec:8a:3d:42:79:1f:10:81:a1:1c:
         fe:ec:00:c1:31:39:4a:7a:2f:2a:fd:fb:cb:72:21:86:07:06:
         2d:53:94:c6:55:79:77:8a:b6:2d:ff:5e:05:b4:e4:d5:4e:27:
         ea:73:17:ee:12:33:9f:8e:99:a7:3f:94:eb:55:d7:e5:15:68:
         aa:b7:46:93:2d:24:67:3a:4a:80:c0:15:82:55:15:40:b2:e9:
         33:35:ed:0f:06:c8:61:af:a8:7b:6b:b5:89:e5:10:ec:ef:19:
         48:82:2a:b7:60:f9:29:9e:50:5c:e9:7b:88:45:1f:64:8b:9e:
         26:56:7c:1f:0d:bb:0e:a0:3a:48:1a:31:5c:91:23:c6:db:d9:
         22:d3:dc:e3:f7:ca:3a:43:b5:f4:b9:18:2f:e3:43:af:7e:6e:
         39:d6:ee:85:a2:2f:33:f8:80:7f:4a:37:83:fc:aa:f2:54:38:
         b8:6d:5e:e3:53:ec:98:24:03:3b:72:1d:a6:81:5b:b4:eb:54:
         45:23:1b:07:b0:fd:d6:37:5c:3e:1b:31:b9:b3:75:5c:c7:80:
         05:68:eb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----